Microsoft To Teach Undergrads About Secure Computing

gcondon writes "The Register is reporting that Microsoft is teaming up with the University of Leeds to teach students how to write secure code. Given the sheer number of programming errors that can lead to security vulnerabilities, it probably makes sense to learn from the company that has tried them all." UndercoverBrotha points out that University of Leeds is one of several venues: "Microsoft is planning to offer 11-week courses at Universities around the world."

Update: 03/24 18:00 GMT by J : Another report worth reading is Writing Software Right, which requires a free but annoying registration at Technology Review. This regards automated methods of finding software errors (not security specifically). Sun's "Jackpot" is discussed, a lint that also "identifies general instances of good or bad programming."

And Microsoft's efforts in this field are explained as well -- the company "paid more than $60 million in 1999 to acquire Intrinsa, maker of a bug-finding tool called Prefix. The program, which sifts through huge swaths of code searching for patterns that match a defined list of common semantic errors, helped find thousands of mistakes in Windows and other Microsoft products." As a Microsoft QA person says, "Our challenge is to get our software to the point that people expect it to work instead of expecting it to fail."

Comments

This just in:

[B3ryllium]

President George W. Bush will be teaching a course in diplomacy ...

Re:This just in:

[TopShelf]

don't forget the Arthur Andersen Advanced Seminar on Corporate Accounting!

Other suggested instructor - course pairings

[isomeme]

• Imelda Marcos, "Financial Responsibility"
• George W. Bush, "Diplomacy and Coalition Building"
• Apple, "Marketing Your Invention" (co-sponsored by Xerox)

Courses?

[sevensharpnine]

Suggested course offerings follow:

CSI1001: Introduction to the necessity of 3rd-party security modules in a Microsoft environment

CSI1002: Trusted++ computing--how to manage your defenseless box on a multi-million node internet

CSI2001: Rapid HotFix/Service Pack deployment

CSI2002: (Continuation of 2001) Rapid HotFix/Service pack undeployment

CSI3001: Microsoft and you--Introspectives on long-term site licensing and vendor lock-in